This repository has been archived on 2022-11-26. You can view files and clone it, but cannot push or open issues or pull requests.
IcyNet.eu/server/api/oauth2/controller/introspection.js

55 lines
1.7 KiB
JavaScript
Raw Normal View History

import { InvalidRequest } from '../error'
import { data as dataResponse } from '../response'
import wrap from '../wrap'
2017-08-23 20:13:45 +00:00
export const introspection = wrap(async function (req, res) {
2017-08-23 20:13:45 +00:00
let clientId = null
let clientSecret = null
if (req.body.client_id && req.body.client_secret) {
clientId = req.body.client_id
clientSecret = req.body.client_secret
console.debug('Client credentials parsed from body parameters ', clientId, clientSecret)
} else {
if (!req.headers || !req.headers.authorization) {
throw new InvalidRequest('No authorization header passed')
2017-08-23 20:13:45 +00:00
}
let pieces = req.headers.authorization.split(' ', 2)
if (!pieces || pieces.length !== 2) {
throw new InvalidRequest('Authorization header is corrupted')
2017-08-23 20:13:45 +00:00
}
if (pieces[0] !== 'Basic') {
throw new InvalidRequest('Unsupported authorization method:', pieces[0])
2017-08-23 20:13:45 +00:00
}
2017-08-24 16:23:03 +00:00
pieces = Buffer.from(pieces[1], 'base64').toString('ascii').split(':', 2)
2017-08-23 20:13:45 +00:00
if (!pieces || pieces.length !== 2) {
throw new InvalidRequest('Authorization header has corrupted data')
2017-08-23 20:13:45 +00:00
}
clientId = pieces[0]
clientSecret = pieces[1]
console.debug('Client credentials parsed from basic auth header: ', clientId, clientSecret)
}
if (!req.body.token) {
throw new InvalidRequest('Token not provided in request body')
2017-08-23 20:13:45 +00:00
}
2020-05-28 18:30:21 +00:00
const token = await req.oauth2.model.accessToken.fetchByToken(req.body.token)
2017-08-23 20:13:45 +00:00
if (!token) {
throw new InvalidRequest('Token does not exist')
2017-08-23 20:13:45 +00:00
}
2020-05-28 18:30:21 +00:00
const ttl = req.oauth2.model.accessToken.getTTL(token)
const resObj = {
2017-08-23 20:13:45 +00:00
token_type: 'bearer',
token: token.token,
expires_in: Math.floor(ttl / 1000)
}
dataResponse(req, res, resObj)
2017-08-23 20:13:45 +00:00
})